$ rpki-client -vvf rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft File: 9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft (raw, json) Hash identifier: aFBcO2VmKfGsMiEkfZcccYPKuBtwrhLPPlIPnecXFig= Subject key identifier: A3:D5:FE:D5:F5:EE:0C:AA:B2:E9:DE:EC:12:58:D5:E7:7C:2F:AC:FC Authority key identifier: 9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA Certificate issuer: /CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA Certificate serial: 0DAE2BA7BA3D4505EF202AB2931FB8CD7BC404BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft Manifest number: 0175 Signing time: Wed 05 Nov 2025 10:53:17 +0000 Manifest this update: Wed 05 Nov 2025 10:48:17 +0000 Manifest next update: Thu 06 Nov 2025 14:15:17 +0000 Files and hashes: 1: 34352e3233392e3139322e302f32322d3332203d3e20323638333830.roa (hash: Vc0ji937IpdL7XWOpIhzuRJHFp086i1A47ZFF8bY1hQ=) 2: 9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl (hash: UkMCa0FLWijh9DEF0bauIkkLftCGFKuL6lFiEi1IocM=) 3: 323830343a353034633a3a2f33322d313238203d3e20323638333830.roa (hash: JJeNadz39LCkxyUoFrTrLdfZuNXJ7JxmxQAUxqwReUg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 14:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ae:2b:a7:ba:3d:45:05:ef:20:2a:b2:93:1f:b8:cd:7b:c4:04:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA Validity Not Before: Nov 5 10:48:17 2025 GMT Not After : Nov 6 14:15:17 2025 GMT Subject: CN=A3D5FED5F5EE0CAAB2E9DEEC1258D5E77C2FACFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:63:9a:c7:c8:00:82:f6:ce:0e:c9:70:56:65: 66:89:5b:ef:cb:11:cc:3e:4c:0d:91:19:99:de:fb: 62:e2:d5:28:03:b1:db:63:0f:01:fb:07:33:55:13: fd:b8:a9:d9:f6:82:6c:69:0c:cf:ce:6a:73:28:bb: 8d:7c:6e:37:2c:d2:e8:ae:3d:66:6e:8b:29:58:d0: ff:27:ea:8f:b7:7e:27:de:e8:77:1b:f1:48:ae:13: 37:52:02:3c:b0:91:b9:92:78:d2:8a:62:2f:37:0c: ca:7c:b4:48:40:70:f6:16:df:ed:bb:03:ca:63:11: 7b:d4:58:b3:19:23:1c:2b:44:04:db:57:98:a7:0e: fe:b4:ef:43:a0:c4:5c:a2:a4:88:d9:2d:40:cf:67: ad:c2:fa:fa:41:e7:81:18:d1:67:8c:d9:28:1f:f1: 48:7c:39:03:85:cc:6f:b0:ef:09:9b:6f:9d:d4:02: f2:91:a8:d8:0c:23:e9:5e:64:e3:74:4d:b5:dd:2a: c3:a5:f0:65:2e:e6:23:ee:11:f0:df:4b:0e:5d:a9: 78:98:bd:33:c2:0a:48:95:21:4a:b2:cf:03:c2:d6: 1e:96:77:4c:e0:d4:c3:b4:60:7f:8e:c7:25:e7:68: 39:71:85:58:f4:e4:93:37:d6:91:70:ef:7f:96:17: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:FE:D5:F5:EE:0C:AA:B2:E9:DE:EC:12:58:D5:E7:7C:2F:AC:FC X509v3 Authority Key Identifier: keyid:9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a5:4e:86:22:11:92:21:f3:83:9a:7c:35:3d:0c:1f:3e:8a: cc:69:e8:18:9b:e3:fb:dc:d0:d5:e4:7e:aa:71:90:a9:ff:81: 0b:a3:da:01:29:66:42:24:e5:20:77:3b:f9:a1:e0:2e:5d:1d: 7c:94:15:21:db:5a:89:89:e4:9a:9d:51:b9:24:f4:84:cc:23: bc:32:28:30:ae:ea:a2:5d:99:f0:f1:ec:ee:ae:ad:d8:7c:a2: 22:ff:96:95:9d:9f:4e:8d:7c:62:dc:3c:a7:87:a1:67:86:ae: 61:89:0b:3f:a7:4a:91:db:70:99:ea:71:ff:1e:6b:18:c0:d4: 81:dc:2f:3d:e4:4e:d0:c4:e5:7f:41:85:73:4b:59:c8:46:74: ea:8a:48:f2:09:e9:7e:1d:a2:e3:04:d5:71:81:f8:a2:8d:3d: 78:6c:f4:e7:b4:1b:d7:d9:9f:64:9d:8a:9c:45:1e:9a:a3:0c: d4:b4:31:f0:68:73:bc:bb:e6:ab:75:35:25:04:89:7f:e1:b5: 05:17:c9:a6:0e:57:64:e5:68:5f:5c:4b:5d:77:f6:9f:7f:a2: 4f:4c:dc:24:a5:56:30:7d:6a:dd:8f:98:6a:42:b6:e4:aa:6c: ec:c6:8a:04:ef:dc:1b:6f:bb:5e:12:32:73:c5:89:09:d5:21: c5:90:56:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDa4rp7o9RQXvICqykx+4zXvEBL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDRTVCODFCQTQ1ODhBOTA1OEUzMkY3ODU5MEVENEFC RkVCMjlCQTAeFw0yNTExMDUxMDQ4MTdaFw0yNTExMDYxNDE1MTdaMDMxMTAvBgNV BAMTKEEzRDVGRUQ1RjVFRTBDQUFCMkU5REVFQzEyNThENUU3N0MyRkFDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqY5rHyACC9s4OyXBWZWaJW+/L Ecw+TA2RGZne+2Li1SgDsdtjDwH7BzNVE/24qdn2gmxpDM/OanMou418bjcs0uiu PWZuiylY0P8n6o+3fife6Hcb8UiuEzdSAjywkbmSeNKKYi83DMp8tEhAcPYW3+27 A8pjEXvUWLMZIxwrRATbV5inDv6070OgxFyipIjZLUDPZ63C+vpB54EY0WeM2Sgf 8Uh8OQOFzG+w7wmbb53UAvKRqNgMI+leZON0TbXdKsOl8GUu5iPuEfDfSw5dqXiY vTPCCkiVIUqyzwPC1h6Wd0zg1MO0YH+OxyXnaDlxhVj05JM31pFw73+WF9sPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUo9X+1fXuDKqy6d7sEljV53wvrPwwHwYDVR0j BBgwFoAUms5bgbpFiKkFjjL3hZDtSr/rKbowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3p1eHVkMWI0dWNzYUtZc2lDeldUenl1S0R6WDdoMWpWNjFBb1FZM245 cnIvMC85QUNFNUI4MUJBNDU4OEE5MDU4RTMyRjc4NTkwRUQ0QUJGRUIyOUJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBQ0U1QjgxQkE0NTg4QTkw NThFMzJGNzg1OTBFRDRBQkZFQjI5QkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3p1eHVkMWI0dWNzYUtZc2lDeldUenl1S0R6WDdoMWpWNjFBb1FZM245cnIvMC85 QUNFNUI4MUJBNDU4OEE5MDU4RTMyRjc4NTkwRUQ0QUJGRUIyOUJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeqVOhiIRkiHzg5p8NT0MHz6KzGnoGJvj+9zQ1eR+qnGQqf+BC6PaASlmQiTl IHc7+aHgLl0dfJQVIdtaiYnkmp1RuST0hMwjvDIoMK7qol2Z8PHs7q6t2HyiIv+W lZ2fTo18Ytw8p4ehZ4auYYkLP6dKkdtwmepx/x5rGMDUgdwvPeRO0MTlf0GFc0tZ yEZ06opI8gnpfh2i4wTVcYH4oo09eGz057Qb19mfZJ2KnEUemqMM1LQx8GhzvLvm q3U1JQSJf+G1BRfJpg5XZOVoX1xLXXf2n3+iT0zcJKVWMH1q3Y+YakK25Kps7MaK BO/cG2+7XhIyc8WJCdUhxZBWpg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:13 2025 by rpki-client